better-supabase 0.10.0 → 0.11.0

package/dist/{field-errors-nFnYWvB0.d.ts → field-errors-DmJICh93.d.ts}

@@ -1,10 +1,10 @@
-import { b as DbError } from "./result-Cj3yWhjH.js";
-import { J as TemplateValues } from "./storage-api-B4Ib2Zpo.js";
-import { at as QuerySpec } from "./define-DXTC706J.js";
-import { _ as TopicMessage, c as RealtimeClient, d as SubscribeOptions, i as PresenceOptions, s as PresenceSubscription } from "./topic-Dgs-eSYQ.js";
-import { t as ClientPorts } from "./ports-Dcnuo3HT.js";
-import { a as ClientAuth } from "./bind-DkaP_0iS.js";
-import { a as LiveSource, r as LiveCountSeed } from "./index-DcijDfh1.js";
+import { b as DbError } from "./result-BREt7qOh.js";
+import { O as TemplateValues } from "./bucket-BBSNDFNH.js";
+import { at as QuerySpec } from "./define-M_r1d2AT.js";
+import { _ as TopicMessage, c as RealtimeClient, d as SubscribeOptions, i as PresenceOptions, s as PresenceSubscription } from "./topic-1WTkDnPd.js";
+import { t as ClientPorts } from "./ports-DCAcG26M.js";
+import { a as ClientAuth } from "./bind-CTNKpBM6.js";
+import { a as LiveSource, r as LiveCountSeed } from "./index-qCG78-Rf.js";
 import { SupabaseClient } from "@supabase/supabase-js";
 import { StandardSchemaV1 } from "@standard-schema/spec";
 import { QueryClient } from "@tanstack/query-core";

package/dist/{filter-evaluate-CEm52E5s.d.ts → filter-evaluate-BJcaL3o1.d.ts}

@@ -1,4 +1,4 @@
-import { h as FilterQuery, l as FilterFieldType, r as FilterClock } from "./filter-query-D3wOD1P_.js";
+import { h as FilterQuery, l as FilterFieldType, r as FilterClock } from "./filter-query-Bc_Qa8V_.js";
 //#region src/list/filter-evaluate.d.ts
 /**
  * A field a filter tree can test on a plain record. `FilterFieldInfo` from a

package/dist/{filter-query-D3wOD1P_.d.ts → filter-query-Bc_Qa8V_.d.ts}

@@ -1,5 +1,5 @@
 /// <reference lib="esnext.temporal" />
-import { f as ColumnMeta } from "./types-BO8lVTun.js";
+import { f as ColumnMeta } from "./types-BrpW5ixT.js";
 //#region src/list/filter-query.d.ts
 type FilterCombinator = "and" | "or";
 interface FilterRule<V = unknown> {

package/dist/{flags-Dz5PIzFU.d.ts → flags-6KK6Vqkr.d.ts}

@@ -1,6 +1,6 @@
-import { w as ErrorMapper } from "./result-Cj3yWhjH.js";
-import { t as BlockTransport } from "./block-transport-NbUJygA7.js";
-import { r as BlockTemporalOptions } from "./block-helpers-7pMBVsE6.js";
+import { T as ErrorMapper } from "./result-BREt7qOh.js";
+import { t as BlockTransport } from "./block-transport-DezJPPA0.js";
+import { r as BlockTemporalOptions } from "./block-helpers-CjcQM1yA.js";
 //#region src/blocks/flags/flags.d.ts
 type FlagType = "boolean" | "string" | "number" | "object";
 type FlagValue = boolean | string | number | null | FlagValue[] | {

package/dist/{flags-CtSrkVuW.js → flags-aUR7Rod6.js}

@@ -1,6 +1,6 @@
 import { n as isRecord } from "./guards-6F2bCtQR.js";
 import { t as DEFAULT_CLAIMS } from "./claims-PqzCxaTD.js";
-import { C as optionalText, F as stringsOf, I as textOf, f as errorText, k as recordsOf, n as applyTemporal, o as blockCall } from "./block-helpers-BfVCR5Fc.js";
+import { C as optionalText, F as stringsOf, I as textOf, f as errorText, k as recordsOf, n as applyTemporal, o as blockCall } from "./block-helpers-DkVZNDrj.js";
 //#region src/blocks/flags/flags.ts
 const BUCKETS = 1e4;
 /**

package/dist/flags-sdk/index.d.ts

@@ -1,4 +1,4 @@
-import { a as FlagDefinition, g as FlagsProviderOptions, h as FlagsProvider, m as FlagValue, n as FlagContext, r as FlagContextOptions } from "../flags-Dz5PIzFU.js";
+import { a as FlagDefinition, g as FlagsProviderOptions, h as FlagsProvider, m as FlagValue, n as FlagContext, r as FlagContextOptions } from "../flags-6KK6Vqkr.js";
 //#region src/flags-sdk/flags-sdk.d.ts
 /** One Flags SDK entity; Vercel Flags targets it as `<name>.id`. */
 interface FlagsSdkEntity {

package/dist/flags-sdk/index.js

@@ -1,5 +1,5 @@
-import { f as errorText } from "../block-helpers-BfVCR5Fc.js";
-import { a as flagContext, n as createFlagsProvider, r as evaluateFlag } from "../flags-CtSrkVuW.js";
+import { f as errorText } from "../block-helpers-DkVZNDrj.js";
+import { a as flagContext, n as createFlagsProvider, r as evaluateFlag } from "../flags-aUR7Rod6.js";
 //#region src/flags-sdk/flags-sdk.ts
 function originOf(origin, key) {
 	return typeof origin === "function" ? origin(key) : origin?.replaceAll("{key}", encodeURIComponent(key));

package/dist/{framework-Cfm0IspZ.js → framework-Ch8bMmQY.js}

@@ -1,5 +1,5 @@
-import { n as toSession } from "./view-DZ63nqwt.js";
-import { t as withBetterSupabase } from "./composite-CPV0thLs.js";
+import { n as toSession } from "./view-CYX1wsgp.js";
+import { t as withBetterSupabase } from "./composite-BFatHqOU.js";
 //#region src/server/framework.ts
 /** Every caller: the framework factories guard per loader, action or route instead. */
 const EVERY_CALLER = [

package/dist/{framework-C2oL4OaO.d.ts → framework-D6IFkuAg.d.ts}

@@ -1,9 +1,9 @@
-import { a as AnyModels, i as AnyFunctions } from "./types-BO8lVTun.js";
-import { s as ServerOptions } from "./server-types-fXwJoFjt.js";
-import { t as AuthSession } from "./view-SuASaomx.js";
-import { n as SessionEntryConfig } from "./session-Djo5t4KQ.js";
-import { n as BetterSupabaseContributions } from "./composite-DMMA_Whg.js";
-import { t as RefusalRedirects } from "./refusal-Bdr1k47u.js";
+import { a as AnyModels, i as AnyFunctions } from "./types-BrpW5ixT.js";
+import { c as ServerOptions } from "./server-types-BKN_R4Ws.js";
+import { t as AuthSession } from "./view-Bf7e07rQ.js";
+import { n as SessionEntryConfig } from "./session-CwpfitmI.js";
+import { n as BetterSupabaseContributions } from "./composite-B1Mmo4TU.js";
+import { t as RefusalRedirects } from "./refusal-CufncwaN.js";
 //#region src/server/framework.d.ts
 /** What the framework factories (`createSvelteKit`, `createReactRouter`, `createTanStackStart`) take. */
 interface FrameworkOptions extends ServerOptions, RefusalRedirects, Pick<SessionEntryConfig, "checkSession" | "cookieScopes" | "encode"> {
@@ -18,7 +18,7 @@ interface FrameworkOptions extends ServerOptions, RefusalRedirects, Pick<Session
   readonly waitUntil?: (promise: Promise<unknown>) => void;
 }
 /** The keys the framework factories put on `locals` or `context`. */
-type FrameworkLocals<M extends AnyModels, F extends AnyFunctions, E, C = unknown, P = unknown> = BetterSupabaseContributions<M, F, E, C, P> & {
+type FrameworkLocals<M extends AnyModels, F extends AnyFunctions, E, C = unknown, P = unknown, B = unknown> = BetterSupabaseContributions<M, F, E, C, P, B> & {
   /** The caller as plain data, safe to return from a loader to the browser. */
   readonly session: AuthSession<C, P>;
 };

package/dist/{function-contract-B4c0XuTU.d.ts → function-contract-DWqFl_QO.d.ts}

@@ -1,4 +1,4 @@
-import { t as StandardSchemaV1 } from "./standard-C3_AAF3g.js";
+import { t as StandardSchemaV1 } from "./standard-BcUQuUgu.js";
 //#region src/core/function-contract.d.ts
 /** What a typed Edge Function takes and returns, as the caller sees them. */
 interface FunctionContract<In = unknown, Out = unknown> {

package/dist/{gateway-CJL6ZG17.d.ts → gateway-Bq_tWwxE.d.ts}

@@ -1,8 +1,8 @@
 /// <reference lib="esnext.temporal" />
-import { b as DbError } from "./result-Cj3yWhjH.js";
-import { g as JobHandler } from "./types-P1S1cj6N.js";
-import { g as AiModelInput, i as AiChat } from "./ai-chat-al8b3spK.js";
-import { a as Usage, c as UsageEntry, h as UsageStatus } from "./usage-CnQHSM_r.js";
+import { b as DbError } from "./result-BREt7qOh.js";
+import { g as JobHandler } from "./types-BEEFkNFY.js";
+import { g as AiModelInput, i as AiChat } from "./ai-chat-D-2MH1sU.js";
+import { a as Usage, c as UsageEntry, h as UsageStatus } from "./usage-C504GF55.js";
 import { LanguageModelUsage } from "ai";
 //#region src/ai-sdk/gateway.d.ts
 /** Token counts and the gateway's cost of one generation. */

package/dist/h3/index.d.ts

@@ -1,4 +1,4 @@
-import { n as RouteGuardOptions } from "../refusal-Bdr1k47u.js";
+import { n as RouteGuardOptions } from "../refusal-CufncwaN.js";
 import { t as Validated } from "../shared-DDSjEGDR.js";
 import { AnyEntry, Contributions } from "@supabase/middleware";
 //#region src/bridges/h3.d.ts

package/dist/h3/index.js

@@ -1,5 +1,5 @@
 import { a as toResponse, i as nitroCloudflareEnv, n as bufferInPlace, t as around } from "../shared-BmMcMoW9.js";
-import { a as routeRefusal, n as guardedLocals, t as errorResponse } from "../refusal-Ch-u9dVd.js";
+import { a as routeRefusal, n as guardedLocals, t as errorResponse } from "../refusal-CFpfmjcS.js";
 //#region src/bridges/h3.ts
 /**
 * Runs an entry array as H3 2 middleware (`app.use(...)`, Nitro and Nuxt

package/dist/h3/v1/index.d.ts

@@ -1,4 +1,4 @@
-import { n as RouteGuardOptions } from "../../refusal-Bdr1k47u.js";
+import { n as RouteGuardOptions } from "../../refusal-CufncwaN.js";
 import { t as Validated } from "../../shared-DDSjEGDR.js";
 import { n as NodeRequestHead, t as NodeHeaderTarget } from "../../node-headers-AO06VhqH.js";
 import { AnyEntry, Contributions } from "@supabase/middleware";

package/dist/h3/v1/index.js

@@ -1,4 +1,4 @@
-import { a as routeRefusal, n as guardedLocals, t as errorResponse } from "../../refusal-Ch-u9dVd.js";
+import { a as routeRefusal, n as guardedLocals, t as errorResponse } from "../../refusal-CFpfmjcS.js";
 import { t as beforeRoute } from "../../before-route-B98js9m_.js";
 import { n as headRequest, t as applyWebHeaders } from "../../node-headers-C71zNQHe.js";
 //#region src/h3/v1/index.ts

package/dist/{hmac-DCud0myt.js → hmac-BgpThYQW.js}

@@ -1,5 +1,6 @@
 //#region src/core/hmac.ts
-const encoder = /* @__PURE__ */ new TextEncoder();
+let encoderInstance;
+const encoder = { encode: (text) => (encoderInstance ??= new TextEncoder()).encode(text) };
 /** Constant-time string comparison. */
 function timingSafeEqual(a, b) {
 	const left = encoder.encode(a);

package/dist/hono/index.d.ts

@@ -1,14 +1,15 @@
-import { a as AnyModels, i as AnyFunctions, z as TableKey } from "../types-BO8lVTun.js";
-import { r as AuthState } from "../resolve-7atr-wWr.js";
+import { B as TableKey, a as AnyModels, i as AnyFunctions } from "../types-BrpW5ixT.js";
+import { r as AuthState } from "../resolve-Bqb8TMTt.js";
 import { s as PermissionRef, t as AnyAuthorizer } from "../authorizer-eiOjo-3l.js";
-import { t as BetterSupabase } from "../define-DXTC706J.js";
-import { i as ServerContext, s as ServerOptions, t as BetterServer } from "../server-types-fXwJoFjt.js";
-import { t as AuthSession } from "../view-SuASaomx.js";
-import { i as MiddlewareOptions, r as GuardOptions } from "../respond-Cdg5ibH5.js";
-import { s as BlockRequireOptions } from "../kit-BlcEFQql.js";
-import { i as ResourceContext, l as ResourceRouteOptions, o as ResourceHooks, r as ResourceAction, t as ActionArgs } from "../resource-types-CC59gMHE.js";
-import { t as defineAction } from "../resource-execute-C45ICrN9.js";
-import { i as RouteRateLimitRule, n as RateLimitVerdict, r as RateLimiter, t as RateLimitRouteOptions } from "../rate-limit-C88MEAOm.js";
+import { t as BetterSupabase } from "../define-M_r1d2AT.js";
+import { a as ServerContext, c as ServerOptions, l as SharedServer, n as BetterServer } from "../server-types-BKN_R4Ws.js";
+import { t as AuthSession } from "../view-Bf7e07rQ.js";
+import { i as MiddlewareOptions, r as GuardOptions } from "../respond-CEBC6KUX.js";
+import { s as BlockRequireOptions } from "../kit-BeZX2pR_.js";
+import { t as CorsOptions } from "../cors-kLq6VM06.js";
+import { i as ResourceContext, l as ResourceRouteOptions, o as ResourceHooks, r as ResourceAction, t as ActionArgs } from "../resource-types-CGr0BbL-.js";
+import { t as defineAction } from "../resource-execute-ruP2L1op.js";
+import { i as RouteRateLimitRule, n as RateLimitVerdict, r as RateLimiter, t as RateLimitRouteOptions } from "../rate-limit-c6c1mB6R.js";
 import { AnyEntry, Contributions, ValidateEntries } from "@supabase/middleware";
 import { Context, ErrorHandler, Hono, MiddlewareHandler } from "hono";
 //#region src/bridges/hono.d.ts
@@ -37,10 +38,10 @@ export declare function toHono<const Entries extends readonly AnyEntry[]>(entrie
 //#endregion
 //#region src/hono/index.d.ts
 /** Hono `Env` with the request's better-supabase context in `c.var`. */
-export interface HonoEnv<M extends AnyModels, F extends AnyFunctions, E, C = unknown, P = unknown> {
+export interface HonoEnv<M extends AnyModels, F extends AnyFunctions, E, C = unknown, P = unknown, B = unknown> {
   Variables: {
-    readonly bs: ServerContext<M, F, E, C, P>;
-    readonly db: ServerContext<M, F, E, C, P>["db"];
+    readonly bs: ServerContext<M, F, E, C, P, B>;
+    readonly db: ServerContext<M, F, E, C, P, B>["db"];
     readonly auth: AuthState<C, P>;
     /** The caller as plain data, safe to return in a response. */
     readonly session: AuthSession<C, P>;
@@ -49,6 +50,14 @@ export interface HonoEnv<M extends AnyModels, F extends AnyFunctions, E, C = unk
   };
 }
 export interface HonoOptions extends ServerOptions {
+  /**
+   * An existing server, such as the one `createNext` returned, so both
+   * frameworks share one `createServer`: the same cookies, clients,
+   * credentials and event sinks. The server options are then ignored.
+   */
+  readonly server?: SharedServer;
+  /** Answer preflights and add CORS headers to every route of `app()`. `true` uses Supabase's defaults. */
+  readonly cors?: boolean | CorsOptions;
   /** Include error details in problem responses. Defaults to `NODE_ENV === 'development'`. */
   readonly exposeErrors?: boolean;
   /**
@@ -57,16 +66,16 @@ export interface HonoOptions extends ServerOptions {
    */
   readonly waitUntil?: (promise: Promise<unknown>) => void;
 }
-export interface BetterHono<M extends AnyModels, F extends AnyFunctions, E, C = unknown, P = unknown, Ref = string> extends BetterServer<M, F, E, C, P> {
+export interface BetterHono<M extends AnyModels, F extends AnyFunctions, E, C = unknown, P = unknown, Ref = string, B = unknown> extends BetterServer<M, F, E, C, P, B> {
   /**
    * The app's Hono `Env`, for `new Hono<typeof bs.Env>()` and
    * `Context<typeof bs.Env>`. Type only: `undefined` at runtime.
    */
-  readonly Env: HonoEnv<M, F, E, C, P>;
+  readonly Env: HonoEnv<M, F, E, C, P, B>;
   /** `new Hono<typeof bs.Env>()` with `onError(bs.onError)` installed. */
-  app(): Hono<HonoEnv<M, F, E, C, P>>;
+  app(): Hono<HonoEnv<M, F, E, C, P, B>>;
   /** Resolves the caller, enforces `allow` and sets `c.var.bs`, `c.var.db`, `c.var.auth`. */
-  middleware(options?: MiddlewareOptions): MiddlewareHandler<HonoEnv<M, F, E, C, P>>;
+  middleware(options?: MiddlewareOptions): MiddlewareHandler<HonoEnv<M, F, E, C, P, B>>;
   /**
    * A route guard after `middleware()`: `allow`, `aal`, `scopes`,
    * `requireTenant` and `authorize`. A refused caller gets Problem Details.
@@ -75,7 +84,7 @@ export interface BetterHono<M extends AnyModels, F extends AnyFunctions, E, C =
    * app.post('/invites', bs.require({ requireTenant: true, roles: ['admin'] }), handler)
    * ```
    */
-  require: (options?: BlockRequireOptions<C, P, boolean, Ref>) => MiddlewareHandler<HonoEnv<M, F, E, C, P>>;
+  require: (options?: BlockRequireOptions<C, P, boolean, Ref>) => MiddlewareHandler<HonoEnv<M, F, E, C, P, B>>;
   /**
    * Counts a hit per request with a rate limiter, such as `createRateLimit()`,
    * and adds the `RateLimit` (and with `rule`, `RateLimit-Policy`) fields. A
@@ -88,30 +97,30 @@ export interface BetterHono<M extends AnyModels, F extends AnyFunctions, E, C =
    * }))
    * ```
    */
-  rateLimit(options: RateLimitRouteOptions<Context<HonoEnv<M, F, E, C, P>>>): MiddlewareHandler<HonoEnv<M, F, E, C, P>>;
+  rateLimit(options: RateLimitRouteOptions<Context<HonoEnv<M, F, E, C, P, B>>>): MiddlewareHandler<HonoEnv<M, F, E, C, P, B>>;
   /**
    * Wraps a handler: `Result`s and `AsyncResult`s become JSON or Problem
    * Details, `undefined` becomes 204.
    */
-  handler(fn: (c: Context<HonoEnv<M, F, E, C, P>>, ctx: ServerContext<M, F, E, C, P>) => unknown, options?: {
+  handler(fn: (c: Context<HonoEnv<M, F, E, C, P, B>>, ctx: ServerContext<M, F, E, C, P, B>) => unknown, options?: {
     readonly status?: number;
-  }): (c: Context<HonoEnv<M, F, E, C, P>>) => Promise<Response>;
+  }): (c: Context<HonoEnv<M, F, E, C, P, B>>) => Promise<Response>;
   /**
    * `app.onError(bs.onError)`: `DbException`s (and errors caused by a `DbError`)
    * become Problem Details, Hono's `HTTPException`s keep their own response,
    * and anything else is a 500.
    */
-  readonly onError: ErrorHandler<HonoEnv<M, F, E, C, P>>;
+  readonly onError: ErrorHandler<HonoEnv<M, F, E, C, P, B>>;
   /**
    * REST routes for a table matching the API model: the collection, the
    * item and each action's path. Mount with
    * `app.route('/customers', bs.resource('customers'))` behind `middleware()`.
    */
-  resource<T extends TableKey<M>>(table: T, options?: ResourceRouteOptions<M, T, Ref, ServerContext<M, F, E, C, P>["db"]>): Hono<HonoEnv<M, F, E, C, P>>;
+  resource<T extends TableKey<M>>(table: T, options?: ResourceRouteOptions<M, T, Ref, ServerContext<M, F, E, C, P, B>["db"]>): Hono<HonoEnv<M, F, E, C, P, B>>;
 }
 /** Hono integration: a server plus middleware, handlers and REST resources. */
-export declare function createHono<M extends AnyModels, D, F extends AnyFunctions, E, C = unknown, P = unknown, A extends AnyAuthorizer | undefined = undefined>(betterSupabase: BetterSupabase<M, D, F, E, C, P>, options?: HonoOptions & {
+export declare function createHono<M extends AnyModels, D, F extends AnyFunctions, E, C = unknown, P = unknown, A extends AnyAuthorizer | undefined = undefined, B = unknown>(betterSupabase: BetterSupabase<M, D, F, E, C, P, B>, options?: HonoOptions & {
   readonly authorizer?: A;
-}): BetterHono<M, F, E, C, P, PermissionRef<A>>;
+}): BetterHono<M, F, E, C, P, PermissionRef<A>, B>;
 //#endregion
 export { type ActionArgs, type BlockRequireOptions, type GuardOptions, type HonoBridge, type MiddlewareOptions, type RateLimitRouteOptions, type RateLimitVerdict, type RateLimiter, type ResourceAction, type ResourceContext, type ResourceHooks, type ResourceRouteOptions, type RouteRateLimitRule, defineAction };

package/dist/hono/index.js

@@ -1,15 +1,17 @@
-import { r as dbErrorOf } from "../errors-8i6tSICm.js";
-import { o as problemResponse } from "../problem-pIiL3WbE.js";
-import { a as unexpectedResponse, c as extendServer, n as flushEvents, s as createServer } from "../adapter-rmWaLNe3.js";
-import { n as toSession } from "../view-DZ63nqwt.js";
-import { a as respond, t as defaultExpose } from "../respond-Dpx48ATq.js";
-import { t as withBetterSupabase } from "../composite-CPV0thLs.js";
-import { r as defineAction, t as defineResource } from "../resource-CHGOmg1O.js";
-import { i as requireCaller } from "../kit-gqwkVhGU.js";
-import { t as matchResource } from "../resources-B7htXQeg.js";
+import { r as dbErrorOf } from "../errors-BV1SKTVs.js";
+import { o as problemResponse } from "../problem-JRCohp1j.js";
+import { a as unexpectedResponse, c as extendServer, n as flushEvents, s as createServer } from "../adapter-B2WRsRIg.js";
+import { n as toSession } from "../view-CYX1wsgp.js";
+import { a as respond, t as defaultExpose } from "../respond-Bhp3G__q.js";
+import { t as withBetterSupabase } from "../composite-BFatHqOU.js";
+import { r as defineAction, t as defineResource } from "../resource-Bdkqi8jo.js";
+import { i as requireCaller } from "../kit-LTbHrWWD.js";
+import { t as matchResource } from "../resources-Ck7itNeX.js";
 import { r as handoffOf } from "../shared-BmMcMoW9.js";
-import { t as rateLimitGate } from "../rate-limit-BtbddDnE.js";
+import { n as corsConfig } from "../cors-h_v7TPxl.js";
+import { t as rateLimitGate } from "../rate-limit-DVZ7qIzW.js";
 import { bufferRequest, pipeline, seedContext } from "@supabase/middleware";
+import { withCors } from "@supabase/middleware/cors";
 import { Hono } from "hono";
 import { HTTPException } from "hono/http-exception";
 import { routePath } from "hono/route";
@@ -75,7 +77,7 @@ function segmentsOf(path) {
 }
 /** Hono integration: a server plus middleware, handlers and REST resources. */
 function createHono(betterSupabase, options = {}) {
-	const server = createServer(betterSupabase, options);
+	const server = options.server ?? createServer(betterSupabase, options);
 	const expose = options.exposeErrors ?? defaultExpose();
 	const onError = (cause, c) => {
 		if (cause instanceof HTTPException) return cause.getResponse();
@@ -90,6 +92,8 @@ function createHono(betterSupabase, options = {}) {
 			expose
 		});
 	};
+	const cors = options.cors === true ? {} : options.cors === false ? void 0 : options.cors;
+	const corsMiddleware = cors ? honoMiddleware([withCors(corsConfig(cors))]) : void 0;
 	const waitUntilOf = (c) => {
 		if (options.waitUntil) return options.waitUntil;
 		try {
@@ -105,7 +109,9 @@ function createHono(betterSupabase, options = {}) {
 		Env: void 0,
 		onError,
 		app() {
-			return new Hono().onError(onError);
+			const app = new Hono().onError(onError);
+			if (corsMiddleware) app.use("*", corsMiddleware);
+			return app;
 		},
 		middleware(middlewareOptions = {}) {
 			const run = honoMiddleware([withBetterSupabase(server, {

package/dist/{http-BF-V0CUF.js → http-C7trc6uN.js}

@@ -1,5 +1,5 @@
-import { n as dbError } from "./errors-8i6tSICm.js";
-import { o as problemResponse } from "./problem-pIiL3WbE.js";
+import { n as dbError } from "./errors-BV1SKTVs.js";
+import { o as problemResponse } from "./problem-JRCohp1j.js";
 import { UI_MESSAGE_STREAM_HEADERS } from "ai";
 //#region src/ai-sdk/http.ts
 /** A 400 problem response for a malformed chat request. */

package/dist/{impersonation-CDeCzZP6.js → impersonation-DxU6yHJV.js}

@@ -1,4 +1,4 @@
-import { n as actorOf } from "./actor-KHDOKGb1.js";
+import { n as actorOf } from "./actor-CAL8mMih.js";
 //#region src/auth/impersonation.ts
 /** The `act` claim for an impersonated session. */
 function actClaim(options) {

package/dist/{inbox-BaUJgHOF.d.ts → inbox-Du5aPwKB.d.ts}

@@ -1,9 +1,9 @@
 /// <reference lib="esnext.temporal" />
-import { t as AsyncResult, w as ErrorMapper } from "./result-Cj3yWhjH.js";
+import { T as ErrorMapper, t as AsyncResult } from "./result-BREt7qOh.js";
 import { n as Logger } from "./logger-DWVYUmwi.js";
-import { t as BlockTransport } from "./block-transport-NbUJygA7.js";
-import { i as CursorPageOptions, r as BlockTemporalOptions } from "./block-helpers-7pMBVsE6.js";
-import { n as BlockHooks } from "./block-hooks-C_WaodoA.js";
+import { t as BlockTransport } from "./block-transport-DezJPPA0.js";
+import { i as CursorPageOptions, r as BlockTemporalOptions } from "./block-helpers-CjcQM1yA.js";
+import { n as BlockHooks } from "./block-hooks-DcPJHztl.js";
 //#region src/blocks/inbox/types.d.ts
 /** The channels an inbox can sit on. */
 type InboxChannel = "in_app" | "email" | "slack" | "teams" | "discord" | "telegram" | "whatsapp" | "messenger" | "instagram" | "sms" | "github" | "linear" | "other";

package/dist/{index-DL8z_oDo.d.ts → index-BpyBH5O2.d.ts}

@@ -1,7 +1,7 @@
-import { P as SchemaMeta } from "./types-BO8lVTun.js";
-import { h as MutationIntent } from "./executor-BicyP8Nl.js";
-import { c as MutationNotice, o as EventHub, st as SubjectEventData } from "./events-CtAHxPal.js";
-import { i as EventSink, n as CloudEventOptions, t as CloudEvent } from "./cloud-event-bwsBwVNG.js";
+import { F as SchemaMeta } from "./types-BrpW5ixT.js";
+import { h as MutationIntent } from "./executor-BnMC0lj3.js";
+import { c as MutationNotice, o as EventHub, st as SubjectEventData } from "./events-P3raDX2E.js";
+import { i as EventSink, n as CloudEventOptions, t as CloudEvent } from "./cloud-event-DXkNoI6v.js";
 //#region src/core/block-events-records.d.ts
 /** Events from the parties module: a company, a person, or a link between them. */
 interface PartyEventData {

package/dist/{index-gXy3R1Uq.d.ts → index-Bq409YZn.d.ts}

@@ -1,4 +1,4 @@
-import { n as RouteGuardOptions } from "./refusal-Bdr1k47u.js";
+import { n as RouteGuardOptions } from "./refusal-CufncwaN.js";
 import { t as Validated } from "./shared-DDSjEGDR.js";
 import { AnyEntry, Contributions } from "@supabase/middleware";
 import { IncomingMessage, ServerResponse } from "node:http";

package/dist/{index-MCXVzkXs.d.ts → index-CEcDqDhc.d.ts}

@@ -1,9 +1,9 @@
-import { n as AccessPolicySql, u as ClaimsMeta } from "./types-BO8lVTun.js";
-import { g as BlockScope, h as BlockMode, n as AuthorizationMembership, p as AnyBlocksConfig, r as AuthorizationOperation, s as AuthorizationRoleSource, t as AuthorizationFunctions, x as SqlNaming, y as DisabledRow } from "./authorization-CdJRoZgV.js";
-import { q as ReadSet } from "./define-DXTC706J.js";
+import { n as AccessPolicySql, u as ClaimsMeta } from "./types-BrpW5ixT.js";
+import { g as BlockScope, h as BlockMode, n as AuthorizationMembership, p as AnyBlocksConfig, r as AuthorizationOperation, s as AuthorizationRoleSource, t as AuthorizationFunctions, x as SqlNaming, y as DisabledRow } from "./authorization-ClWBcXJi.js";
+import { q as ReadSet } from "./define-M_r1d2AT.js";
 import { n as SubjectsConfig, t as SubjectConfig } from "./subjects-DP-fvFkk.js";
-import { l as ModuleIdType, o as ModuleContext, s as ModuleContractFunction, u as ModuleNames } from "./context-CCfX2szU.js";
-import { Nn as AppTablesConfig, S as EntitlementPlansSource, x as ResolvedConfig } from "./codegen-2m4SKVdi.js";
+import { l as ModuleIdType, o as ModuleContext, s as ModuleContractFunction, u as ModuleNames } from "./context-Cv3KlxWY.js";
+import { Nn as AppTablesConfig, S as EntitlementPlansSource, x as ResolvedConfig } from "./codegen-C64C0NZG.js";
 //#region src/sql/shared.d.ts
 /** A `pg_jsonschema` check on a jsonb column, for the `jsonb-schemas` module and key-value tables. */
 interface JsonSchemaCheck {

package/dist/{index-Ck4oK5vV.d.ts → index-CK0Sxx57.d.ts}

@@ -1,11 +1,11 @@
-import { b as DbError, f as Result, t as AsyncResult } from "./result-Cj3yWhjH.js";
-import { H as UploadOptions, J as TemplateValues, U as UrlOptions, V as UploadBody } from "./storage-api-B4Ib2Zpo.js";
-import { at as QuerySpec } from "./define-DXTC706J.js";
-import { c as RealtimeClient, d as SubscribeOptions, g as TopicHandlers, i as PresenceOptions, m as Topic, p as SubscriptionStatus, r as PresenceMember, s as PresenceSubscription, t as EventSchemas } from "./topic-Dgs-eSYQ.js";
-import { t as AuthSnapshot } from "./bind-DkaP_0iS.js";
-import { t as AuthSession } from "./view-SuASaomx.js";
-import { r as LiveCountSeed } from "./index-DcijDfh1.js";
-import { a as BroadcastOptions, c as LiveCountHookOptions, m as UseActionOptions, n as ActionInputOf, o as ClaimsOf, p as ProfileOf, r as ActionResultOf, s as ClientLike, u as LiveQueryHookOptions } from "./field-errors-nFnYWvB0.js";
+import { b as DbError, f as Result, t as AsyncResult } from "./result-BREt7qOh.js";
+import { C as UrlOptions, O as TemplateValues, S as UploadOptions, x as UploadBody } from "./bucket-BBSNDFNH.js";
+import { at as QuerySpec } from "./define-M_r1d2AT.js";
+import { c as RealtimeClient, d as SubscribeOptions, g as TopicHandlers, i as PresenceOptions, m as Topic, p as SubscriptionStatus, r as PresenceMember, s as PresenceSubscription, t as EventSchemas } from "./topic-1WTkDnPd.js";
+import { t as AuthSnapshot } from "./bind-CTNKpBM6.js";
+import { t as AuthSession } from "./view-Bf7e07rQ.js";
+import { r as LiveCountSeed } from "./index-qCG78-Rf.js";
+import { a as BroadcastOptions, c as LiveCountHookOptions, m as UseActionOptions, n as ActionInputOf, o as ClaimsOf, p as ProfileOf, r as ActionResultOf, s as ClientLike, u as LiveQueryHookOptions } from "./field-errors-DmJICh93.js";
 import { SupabaseClient } from "@supabase/supabase-js";
 import { ReactNode, SubmitEvent } from "react";
 import { QueryClient } from "@tanstack/query-core";

package/dist/{index-Cckxs8IE.d.ts → index-Csi8jD-m.d.ts}

@@ -1,6 +1,6 @@
-import { n as DbException } from "./escape-like-AUEPn-C5.js";
-import { E as PrimaryKeyValue, U as UniqueWhere, W as Update, a as AnyModels, i as AnyFunctions, x as Insert, z as TableKey } from "./types-BO8lVTun.js";
-import { B as UpsertArgs, Bt as WhereInput, Ct as FindOnlyArgs, D as OffsetRangeArgs, E as OffsetPageArgs, H as WriteArgs, I as Returned, Nt as Payload, Pt as ReadArgs, St as FindManyArgs, T as OffsetPage, _ as Db, at as QuerySpec, b as DeleteExt, dt as AggregateArgs, g as CursorPageArgs, h as CursorPage, it as InferResult, mt as AggregateResult, s as CacheAdapter, t as BetterSupabase, x as FindExt, xt as FindFirstArgs, y as DeleteArgs, yt as CountArgs, z as UpdateArgs } from "./define-DXTC706J.js";
+import { n as DbException } from "./escape-like-B339PlP-.js";
+import { B as TableKey, D as PrimaryKeyValue, G as Update, S as Insert, W as UniqueWhere, a as AnyModels, i as AnyFunctions } from "./types-BrpW5ixT.js";
+import { B as UpsertArgs, Bt as WhereInput, Ct as FindOnlyArgs, D as OffsetRangeArgs, E as OffsetPageArgs, H as WriteArgs, I as Returned, Nt as Payload, Pt as ReadArgs, St as FindManyArgs, T as OffsetPage, _ as Db, at as QuerySpec, b as DeleteExt, dt as AggregateArgs, g as CursorPageArgs, h as CursorPage, it as InferResult, mt as AggregateResult, s as CacheAdapter, t as BetterSupabase, x as FindExt, xt as FindFirstArgs, y as DeleteArgs, yt as CountArgs, z as UpdateArgs } from "./define-M_r1d2AT.js";
 import { t as BetterQueryMeta } from "./invalidate-BBqhpxyB.js";
 import { DataTag, InfiniteData, QueryClient, SkipToken } from "@tanstack/query-core";
 //#region src/query/queries.d.ts

package/dist/{index-8xwnaWHY.d.ts → index-D8yhOz_4.d.ts}

@@ -1,7 +1,7 @@
-import { d as AccessBlockConfig, p as AnyBlocksConfig } from "./authorization-CdJRoZgV.js";
-import { i as BlockCategory } from "./define-block-BlHQxDIQ.js";
-import { i as PortName } from "./ports-B53rB7zg.js";
-import { Nn as AppTablesConfig, On as AppTableConfig, dt as PresetScope, ft as PresetTenantName, it as PresetCodeField, nt as Preset, rt as PresetAccess, st as PresetFieldKey, y as BetterSupabaseConfig } from "./codegen-2m4SKVdi.js";
+import { d as AccessBlockConfig, p as AnyBlocksConfig } from "./authorization-ClWBcXJi.js";
+import { i as BlockCategory } from "./define-block-CPyJ95rq.js";
+import { i as PortName } from "./ports-DGe1vzF2.js";
+import { Nn as AppTablesConfig, On as AppTableConfig, dt as PresetScope, ft as PresetTenantName, it as PresetCodeField, nt as Preset, rt as PresetAccess, st as PresetFieldKey, y as BetterSupabaseConfig } from "./codegen-C64C0NZG.js";
 //#region src/preset/blocks.d.ts
 /**
  * Every block a preset code can select, by bit position. Append-only: a new

package/dist/{index-D1kMyNc7.d.ts → index-DHReeV74.d.ts}

@@ -1,5 +1,5 @@
-import { b as DbError, f as Result, t as AsyncResult } from "./result-Cj3yWhjH.js";
-import { C as BucketClient, D as BucketPolicy, F as StorageAdminClient, Q as StoragePath, S as Bucket, T as BucketConnectOptions, r as StorageClient, w as BucketConfig } from "./storage-api-B4Ib2Zpo.js";
+import { b as DbError, f as Result, t as AsyncResult } from "./result-BREt7qOh.js";
+import { N as StorageClient, Q as StoragePath, a as BucketConnectOptions, h as StorageAdminClient, i as BucketConfig, n as Bucket, r as BucketClient, s as BucketPolicy } from "./bucket-BBSNDFNH.js";
 import { SupabaseClient } from "@supabase/supabase-js";
 //#region src/storage/errors.d.ts
 /** Maps a Storage error (`StorageApiError`, fetch failures) to a `DbError`. */

package/dist/{index-DTQbC3CW.d.ts → index-DgobXyil.d.ts}

@@ -1,4 +1,4 @@
-import { c as InboxListSnapshot, i as ConversationSnapshot, l as InboxSource, p as InboxWidgetSnapshot, s as InboxListActions, t as ConversationActions, u as InboxWidgetActions } from "./client-CpMv4-v5.js";
+import { c as InboxListSnapshot, i as ConversationSnapshot, l as InboxSource, p as InboxWidgetSnapshot, s as InboxListActions, t as ConversationActions, u as InboxWidgetActions } from "./client-CCGSn7m5.js";
 //#region src/blocks/inbox/react/index.d.ts
 interface UseInboxOptions<T> {
   /** The organization; the hook joins `inbox:org:<id>`. `null` waits. */

package/dist/{index-BurdFUXr.d.ts → index-F6XTTkC9.d.ts}

@@ -1,11 +1,11 @@
-import { t as AsyncResult } from "./result-Cj3yWhjH.js";
-import { a as AnyModels, i as AnyFunctions } from "./types-BO8lVTun.js";
+import { t as AsyncResult } from "./result-BREt7qOh.js";
+import { a as AnyModels, i as AnyFunctions } from "./types-BrpW5ixT.js";
 import { l as PublicEnv } from "./index-CxmVzT-3.js";
-import { h as SessionEncoding } from "./resolve-7atr-wWr.js";
-import { t as BetterSupabase } from "./define-DXTC706J.js";
-import { i as KeyboardPort, l as StoragePort, n as DeepLinkPort, r as FilePickerPort, s as PushTokenPort, t as ClientPorts } from "./ports-Dcnuo3HT.js";
-import { r as BetterClient } from "./bind-DkaP_0iS.js";
-import { n as FunctionContract } from "./function-contract-B4c0XuTU.js";
+import { h as SessionEncoding } from "./resolve-Bqb8TMTt.js";
+import { t as BetterSupabase } from "./define-M_r1d2AT.js";
+import { i as KeyboardPort, l as StoragePort, n as DeepLinkPort, r as FilePickerPort, s as PushTokenPort, t as ClientPorts } from "./ports-DCAcG26M.js";
+import { r as BetterClient } from "./bind-CTNKpBM6.js";
+import { n as FunctionContract } from "./function-contract-DWqFl_QO.js";
 import { FunctionInvokeOptions, SupabaseClient, SupabaseClientOptions } from "@supabase/supabase-js";
 //#region src/client/functions.d.ts
 /** `supabase.functions.invoke` options, without the body: `invoke` sends the input. */

package/dist/{index-DMONTkSf.d.ts → index-k-rrfG1g.d.ts}

@@ -1,5 +1,5 @@
-import { P as SchemaMeta, u as ClaimsMeta } from "./types-BO8lVTun.js";
-import { a as Generator, u as JsonSchemaSource, x as ResolvedConfig, y as BetterSupabaseConfig } from "./codegen-2m4SKVdi.js";
+import { F as SchemaMeta, u as ClaimsMeta } from "./types-BrpW5ixT.js";
+import { a as Generator, u as JsonSchemaSource, x as ResolvedConfig, y as BetterSupabaseConfig } from "./codegen-C64C0NZG.js";
 //#region src/config/defaults.d.ts
 /**
  * Every default `resolveConfig` fills in. Other modules (the SQL module

package/dist/{index-DcijDfh1.d.ts → index-qCG78-Rf.d.ts}

@@ -1,7 +1,7 @@
-import { b as DbError, f as Result } from "./result-Cj3yWhjH.js";
-import { P as SchemaMeta } from "./types-BO8lVTun.js";
-import { at as QuerySpec } from "./define-DXTC706J.js";
-import { c as RealtimeClient, p as SubscriptionStatus } from "./topic-Dgs-eSYQ.js";
+import { b as DbError, f as Result } from "./result-BREt7qOh.js";
+import { F as SchemaMeta } from "./types-BrpW5ixT.js";
+import { at as QuerySpec } from "./define-M_r1d2AT.js";
+import { c as RealtimeClient, p as SubscriptionStatus } from "./topic-1WTkDnPd.js";
 //#region src/realtime/live.d.ts
 /** What `liveQuery` needs from `betterSupabase`: metadata and the tables a spec reads. */
 interface LiveSource {

package/dist/{index-Co0YsJTk.d.ts → index-wTnPJUhv.d.ts}

@@ -1,6 +1,6 @@
 import { c as SpecDiagnostic, r as DocumentFormat } from "./format-CNwSjXUU.js";
-import { r as ResourceDescription } from "./resource-DxcgtHq6.js";
-import { C as ApiSource, _ as OpenApiDocuments, b as OpenApiVersion, l as AnyOpenApiDocument, n as DefineApiOptions, x as RenderedOpenApi } from "./api-XJcQON_7.js";
+import { r as ResourceDescription } from "./resource-DYEtc-KN.js";
+import { C as ApiSource, _ as OpenApiDocuments, b as OpenApiVersion, l as AnyOpenApiDocument, n as DefineApiOptions, x as RenderedOpenApi } from "./api-DoWK3dTw.js";
 //#region src/openapi/format.d.ts
 /**
  * OpenAPI as a `DocumentFormat`. 3.1 is the default; 3.0 is legacy (schemas